The following describes possible issues with the PingID integration for Mac login and how to resolve them.
If you are locked out of the Mac following the installation and you have a remote SSH connection or you have set the option to use Single User mode, you can run an uninstall script, /Library/Application Support/PingIdentity/uninstall.sh.
Mac user cannot complete second factor authentication
Ensure that the user's login name has been registered to PingID in the Admin portal identically to the Mac admin user name.
Mac user is blocked after installation
Online Authentication is required after installation. If the machine cannot reach the PingID service due to lack of an internet connection, ensure the machine can connect to the internet before the sign-on process is completed.
Users must go through online authentication the first time after installation and only then can perform offline authentication.